US10360187B1 - Hybrid storage for virtual machines and containers - Google Patents

Hybrid storage for virtual machines and containers Download PDF

Info

Publication number
US10360187B1
US10360187B1 US15/062,070 US201615062070A US10360187B1 US 10360187 B1 US10360187 B1 US 10360187B1 US 201615062070 A US201615062070 A US 201615062070A US 10360187 B1 US10360187 B1 US 10360187B1
Authority
US
United States
Prior art keywords
files
file
containers
service
storage
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active, expires
Application number
US15/062,070
Inventor
Pavel Emelyanov
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Virtuozzo International GmbH
Original Assignee
Virtuozzo International GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Virtuozzo International GmbH filed Critical Virtuozzo International GmbH
Priority to US15/062,070 priority Critical patent/US10360187B1/en
Assigned to Parallels IP Holdings GmbH reassignment Parallels IP Holdings GmbH ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: EMELYANOV, PAVEL
Assigned to VIRTUOZZO INTERNATIONAL GMBH reassignment VIRTUOZZO INTERNATIONAL GMBH ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: Parallels IP Holdings GmbH
Priority to US16/518,472 priority patent/US10824463B1/en
Application granted granted Critical
Publication of US10360187B1 publication Critical patent/US10360187B1/en
Assigned to WILMINGTON TRUST (LONDON) LIMITED reassignment WILMINGTON TRUST (LONDON) LIMITED SECURITY INTEREST IN TRADEMARK, PATENT, AND COPYRIGHT RIGHTS Assignors: ONAPP LIMITED, VIRTUOZZO INTERNATIONAL GMBH
Active legal-status Critical Current
Adjusted expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/10File systems; File servers
    • G06F16/18File system types
    • G06F16/188Virtual file systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0602Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
    • G06F3/0604Improving or facilitating administration, e.g. storage management
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0602Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
    • G06F3/062Securing storage systems
    • G06F3/0623Securing storage systems in relation to content
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0628Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0629Configuration or reconfiguration of storage systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0628Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0662Virtualisation aspects
    • G06F3/0664Virtualisation aspects at device level, e.g. emulation of a storage device or system
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0628Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0662Virtualisation aspects
    • G06F3/0665Virtualisation aspects at area level, e.g. provisioning of virtual or logical volumes
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0668Interfaces specially adapted for storage systems adopting a particular infrastructure
    • G06F3/0671In-line storage system
    • G06F3/0673Single storage device
    • G06F3/0674Disk device
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • G06F2009/45562Creating, deleting, cloning virtual machine instances
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • G06F2009/45579I/O management, e.g. providing access to device drivers or storage
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • G06F2009/45583Memory management, e.g. access or allocation

Definitions

  • This invention relates to a method for data storage, and in particular, to implementing a hybrid storage for Virtual Machines (VMs) and Containers.
  • VMs Virtual Machines
  • Containers Containers
  • VMs' Virtual Machines'
  • Containers 120 store data in their own file system 125 .
  • the VMs store data on the image file 130 , which is converted into a virtual disk 115 .
  • the image file 130 cannot be stored on a common file system 140 , because the common file system is not designed to support the loads created by the use of the image file 130 .
  • the common file system 140 would be very slow.
  • the image file is placed onto a special large file storage 150 , which is optimized for very large files that have their attributes (i.e., metadata) change very rarely, while the file data content experiences frequent and massive changes.
  • the large file storage 150 can be implemented as CEPH (rbd*), ZFS (zuol), PStorage*, thin DM, etc.
  • the management system for VMs and Containers cannot only store the large image files 130 . It also has to store a lot of small service files 135 , such as configuration files, logs, locks, states, etc.
  • the volume of these files is significantly smaller than the volume of the image files, but a number of the files 135 are much larger than the number of the image files 130 .
  • the large files storage 150 is not optimized for storing a lot of small files 135 , which have to be stored on a small files storage 155 .
  • Conventional file storages are not designed for storing large and small files at the same time. They work very slowly if both types of files are stored on the same storage.
  • having VM and Container files located on different storages is inefficient in terms of data access by the management system.
  • the large files storage 150 is distributed, while the small file storage 155 is not distributed. Thus, moving of the VMs and Containers can be problematic.
  • the management system for VMs and Containers needs to have the large data files and small configuration files stored on the same distributed storage for efficient data access.
  • the present invention is directed to a method and system for hybrid data storage, and in particular, to implementing hybrid storage capable of storing the image files and the service files for Virtual Machines (VMs) and Containers that substantially obviates one or more of the disadvantages of the related art.
  • VMs Virtual Machines
  • Containers that substantially obviates one or more of the disadvantages of the related art.
  • a hybrid storage capable of storing the image files and the service files for VMs and Containers.
  • a large file storage is placed onto a service volume.
  • a VM image file is placed onto the large file storage and a file system is mounted on it.
  • the small files storage is also placed onto the service volume. This way a portion of the large file storage can be seen to the management system for VMs and Containers as a part of an interface of the common file system.
  • large files and small files reside on the same storage.
  • One file from the large file storage is dedicated as a service file.
  • the file system is placed into this file, which is mounted into the system as a virtual disk.
  • the small (service) files are stored on the virtual disk. This way all files are accessible by the management system for VMs and Containers.
  • FIG. 1 illustrates a conventional system for separate storage of virtual disk image files and service files for VMs and Containers
  • FIG. 2 illustrates a system for implementing a hybrid storage optimized for storing files for VMs and Containers, in accordance with the exemplary embodiment
  • FIG. 3 illustrates a schematic of an exemplary computer system that can be used for implementation of the invention.
  • VEE Virtual Execution Environment
  • VEE Virtual Execution Environment
  • a type of environment that supports program code execution where at least a part of the real hardware and software required for running program code are presented as their virtual analogs. From the point of view of the user, the code in VEE runs as if it were running on the real computing system.
  • VM Virtual Machine
  • VM Virtual Machine
  • OS OS kernel
  • Support of Virtual Machines is implemented using a Virtual Machine Monitor and/or a Hypervisor.
  • Virtual Private Server is one type of a Virtual Execution Environment (VEE) running on the same hardware system with a single shared OS kernel and sharing most of the system resources, where isolation of Virtual Execution Environments is implemented on a namespace level.
  • VEE Virtual Execution Environment
  • a Virtual Private Server (VPS), often referred to as a “Container,” is a closed set, or collection, of processes, system resources, users, groups of users, objects and data structures. Each VPS has its own ID, or some other identifier, that distinguishes it from other VPSs.
  • a container acts as an isolated virtual server within a single machine, where multiple sets of application services are organized on a single hardware node by placing each into an isolated virtual Container.
  • the VPS/Container offers to its users a service that is functionally substantially equivalent to a standalone server with a remote access.
  • the VPS should preferably act the same as a dedicated computer at a data center.
  • the administrator of the VPS it is desirable for the administrator of the VPS to have the same remote access to the server through the Internet, the same ability to reload the server, load system and application software, authorize VPS users, establish disk space quotas of the users and user groups, support storage area networks (SANs), set up and configure network connections and web servers, etc.
  • SANs storage area networks
  • the full range of system administrator functions is desirable, as if the VPS were a dedicated remote server, with the existence of the VPS being transparent from the perspective of both the VPS user and the VPS administrator.
  • large file storage is placed onto a service volume.
  • a VM image file is placed onto the large file storage and a file system is mounted on it.
  • the small files storage is also placed onto the service volume. This way a portion of the large file storage as a part of an interface of the common file system can be seen to the management system for VMs and Containers.
  • large files and small files reside on the same storage.
  • a standard file system can be used.
  • One file from the large file storage is dedicated as a service file.
  • the file system is placed into this file, which is mounted into the system as a virtual disk.
  • the small files are stored on the virtual disk. This way all files are accessible by the management system for VMs and Containers.
  • the disk can be mounted on the host for launching a Container using ploop (i.e., PARALLELS loop, or a regular LINUX loop, or a natural block device).
  • ploop i.e., PARALLELS loop, or a regular LINUX loop, or a natural block device.
  • the disk image is provided to a hypervisor for launching a VM.
  • FIG. 2 illustrates a system for implementing a hybrid storage optimized for storing files for VMs and Containers, in accordance with the exemplary embodiment.
  • Containers 120 store data in their own file system 125 .
  • the VMs store data on the image file 130 , which is converted into a virtual disk 115 .
  • the image file is placed onto a special large file storage 150 , which is optimized for very large files that have their attributes (i.e., metadata) change very rarely, while the file data content experiences frequent and massive changes.
  • the large file storage 150 can be implemented as CEPH (rbd*), ZFS (zuol), PStorage*, thin DM, etc.
  • the management system for VMs and Containers has to store a lot of small service files 135 , such as configuration files, logs, locks, states, etc.
  • small service files 135 such as configuration files, logs, locks, states, etc.
  • a large files storage 150 is placed onto a service volume 205 .
  • a VM image file 130 is placed onto the large file storage 150 and a file system 210 is mounted on it. Any file system can be used.
  • the component which creates the hybrid storage also creates the service volume 205 and places the file system 210 for storing configuration files.
  • the small files storage 135 is also placed onto the service volume 205 . This way a portion of the large file storage 150 can be seen to the management system for VMs and Containers as a part of an interface of the common file system 210 .
  • a standard file system (e.g., EXT4) can be used.
  • One file from the large file storage is dedicated as a service file.
  • the file system is placed into this file, which is mounted into the system as a virtual disk 215 .
  • the small files are stored on the virtual disk 215 .
  • CTs VMs and Containers
  • a special API library is created for providing an interface for mounting storages for small files and creation of service volumes.
  • the manager application launches a VM or a CT, it needs a special API (library) for using the configuration files used for launching the VMs/CTs.
  • a hierarchical file system such as BTRFS can be used with this interface for the Containers.
  • a node administrator can have all the rights for managing the hybrid storage.
  • the image files can be encrypted.
  • the encryption keys are stored on the CT hoster. However, the hoster data is protected in case of a physical data storage being stolen.
  • an exemplary system for implementing the invention includes a general purpose computing device in the form of a computer system 20 or the like including a processing unit 21 , a system memory 22 , and a system bus 23 that couples various system components including the system memory to the processing unit 21 .
  • the system bus 23 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus, and a local bus using any of a variety of bus architectures.
  • the system memory includes read-only memory (ROM) 24 and random access memory (RAM) 25 .
  • ROM read-only memory
  • RAM random access memory
  • the computer 20 may further include a hard disk drive 27 for reading from and writing to a hard disk, not shown, a magnetic disk drive 28 for reading from or writing to a removable magnetic disk 29 , and an optical disk drive 30 for reading from or writing to a removable optical disk 31 such as a CD-ROM, DVD-ROM or other optical media.
  • the hard disk drive 27 , magnetic disk drive 28 , and optical disk drive 30 are connected to the system bus 23 by a hard disk drive interface 32 , a magnetic disk drive interface 33 , and an optical drive interface 34 , respectively.
  • the drives and their associated computer-readable media provide non-volatile storage of computer readable instructions, data structures, program modules and other data for the computer 20 .
  • a number of program modules may be stored on the hard disk, magnetic disk 29 , optical disk 31 , ROM 24 or RAM 25 , including an operating system 35 .
  • the computer 20 includes a file system 36 associated with or included within the operating system 35 , one or more application programs 37 , other program modules 38 and program data 39 .
  • a user may enter commands and information into the computer 20 through input devices such as a keyboard 40 and pointing device 42 .
  • Other input devices may include a microphone, joystick, game pad, satellite dish, scanner or the like.
  • serial port interface 46 that is coupled to the system bus, but may be connected by other interfaces, such as a parallel port, game port or universal serial bus (USB).
  • a monitor 47 or other type of display device is also connected to the system bus 23 via an interface, such as a video adapter 48 .
  • personal computers typically include other peripheral output devices (not shown), such as speakers and printers.
  • the computer 20 may operate in a networked environment using logical connections to one or more remote computers 49 .
  • the remote computer (or computers) 49 may be another computer, a server, a router, a network PC, a peer device or other common network node, and typically includes many or all of the elements described above relative to the computer 20 , although only a memory storage device 50 has been illustrated.
  • the logical connections include a local area network (LAN) 51 and a wide area network (WAN) 52 .
  • LAN local area network
  • WAN wide area network
  • the computer 20 When used in a LAN networking environment, the computer 20 is connected to the local network 51 through a network interface or adapter 53 . When used in a WAN networking environment, the computer 20 typically includes a modem 54 or other means for establishing communications over the wide area network 52 , such as the Internet.
  • the modem 54 which may be internal or external, is connected to the system bus 23 via the serial port interface 46 .
  • program modules depicted relative to the computer 20 may be stored in the remote memory storage device. It will be appreciated that the network connections shown are exemplary and other means of establishing a communications link between the computers may be used.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Human Computer Interaction (AREA)
  • Software Systems (AREA)
  • Data Mining & Analysis (AREA)
  • Databases & Information Systems (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

A hybrid storage capable of storing the image files and the service files for VMs and Containers is provided. A large files storage is placed onto a service volume. A VM image file is placed onto the large file storage and a file system is mounted on it. The small files storage is also placed onto the service volume. This way a portion of the large file storage can be seen to the management system for VMs and Containers as a part of an interface of the common file system. Thus, large files and small files reside on the same distributed storage. One file from the large file storage is dedicated as a service file. The file system is placed into this file, which is mounted into the system as a virtual disk. The small (service) files are stored on the virtual disk. This way all files are accessible by the management system for VMs and Containers.

Description

BACKGROUND OF THE INVENTION Field of the Invention
This invention relates to a method for data storage, and in particular, to implementing a hybrid storage for Virtual Machines (VMs) and Containers.
Description of the Related Art
A modern trend of virtualization presents some challenges with regard to isolation and storage of Virtual Machines' (VMs') and Containers' data. In conventional systems, as shown in FIG. 1, Containers 120 store data in their own file system 125. The VMs store data on the image file 130, which is converted into a virtual disk 115. However, the image file 130 cannot be stored on a common file system 140, because the common file system is not designed to support the loads created by the use of the image file 130. Thus, the common file system 140 would be very slow. In order to speed up the data processing, the image file is placed onto a special large file storage 150, which is optimized for very large files that have their attributes (i.e., metadata) change very rarely, while the file data content experiences frequent and massive changes. The large file storage 150 can be implemented as CEPH (rbd*), ZFS (zuol), PStorage*, thin DM, etc.
However, the management system for VMs and Containers cannot only store the large image files 130. It also has to store a lot of small service files 135, such as configuration files, logs, locks, states, etc. The volume of these files is significantly smaller than the volume of the image files, but a number of the files 135 are much larger than the number of the image files 130. However, the large files storage 150 is not optimized for storing a lot of small files 135, which have to be stored on a small files storage 155. Conventional file storages are not designed for storing large and small files at the same time. They work very slowly if both types of files are stored on the same storage. However, having VM and Container files located on different storages is inefficient in terms of data access by the management system. The large files storage 150 is distributed, while the small file storage 155 is not distributed. Thus, moving of the VMs and Containers can be problematic. The management system for VMs and Containers needs to have the large data files and small configuration files stored on the same distributed storage for efficient data access.
Accordingly, a system for implementing a distributed hybrid storage for VMs and Containers capable of storing large (image) files and small service files is desired.
SUMMARY OF THE INVENTION
Accordingly, the present invention is directed to a method and system for hybrid data storage, and in particular, to implementing hybrid storage capable of storing the image files and the service files for Virtual Machines (VMs) and Containers that substantially obviates one or more of the disadvantages of the related art.
In one aspect of the invention, a hybrid storage capable of storing the image files and the service files for VMs and Containers is provided. A large file storage is placed onto a service volume. A VM image file is placed onto the large file storage and a file system is mounted on it. The small files storage is also placed onto the service volume. This way a portion of the large file storage can be seen to the management system for VMs and Containers as a part of an interface of the common file system. Thus, large files and small files reside on the same storage. One file from the large file storage is dedicated as a service file. The file system is placed into this file, which is mounted into the system as a virtual disk. The small (service) files are stored on the virtual disk. This way all files are accessible by the management system for VMs and Containers.
Additional features and advantages of the invention will be set forth in the description that follows, and in part will be apparent from the description, or may be learned by practice of the invention. The advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention as claimed.
BRIEF DESCRIPTION OF THE ATTACHED FIGURES
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and together with the description serve to explain the principles of the invention.
In the drawings:
FIG. 1 illustrates a conventional system for separate storage of virtual disk image files and service files for VMs and Containers;
FIG. 2 illustrates a system for implementing a hybrid storage optimized for storing files for VMs and Containers, in accordance with the exemplary embodiment;
FIG. 3 illustrates a schematic of an exemplary computer system that can be used for implementation of the invention.
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings.
The following definitions are used throughout the description.
VEE—Virtual Execution Environment, a type of environment that supports program code execution, where at least a part of the real hardware and software required for running program code are presented as their virtual analogs. From the point of view of the user, the code in VEE runs as if it were running on the real computing system.
VM—Virtual Machine, a type of an isolated Virtual Execution Environments running on the same physical machine simultaneously. Each Virtual Machine instance executes its own OS kernel. Support of Virtual Machines is implemented using a Virtual Machine Monitor and/or a Hypervisor.
Virtual Private Server (VPS), is one type of a Virtual Execution Environment (VEE) running on the same hardware system with a single shared OS kernel and sharing most of the system resources, where isolation of Virtual Execution Environments is implemented on a namespace level. A Virtual Private Server (VPS), often referred to as a “Container,” is a closed set, or collection, of processes, system resources, users, groups of users, objects and data structures. Each VPS has its own ID, or some other identifier, that distinguishes it from other VPSs. A container acts as an isolated virtual server within a single machine, where multiple sets of application services are organized on a single hardware node by placing each into an isolated virtual Container.
The VPS/Container offers to its users a service that is functionally substantially equivalent to a standalone server with a remote access. From the perspective of an administrator of the VPS, the VPS should preferably act the same as a dedicated computer at a data center. For example, it is desirable for the administrator of the VPS to have the same remote access to the server through the Internet, the same ability to reload the server, load system and application software, authorize VPS users, establish disk space quotas of the users and user groups, support storage area networks (SANs), set up and configure network connections and web servers, etc. In other words, the full range of system administrator functions is desirable, as if the VPS were a dedicated remote server, with the existence of the VPS being transparent from the perspective of both the VPS user and the VPS administrator.
In one aspect of the invention, large file storage is placed onto a service volume. A VM image file is placed onto the large file storage and a file system is mounted on it. The small files storage is also placed onto the service volume. This way a portion of the large file storage as a part of an interface of the common file system can be seen to the management system for VMs and Containers. Thus, large files and small files reside on the same storage. A standard file system can be used. One file from the large file storage is dedicated as a service file. The file system is placed into this file, which is mounted into the system as a virtual disk. The small files are stored on the virtual disk. This way all files are accessible by the management system for VMs and Containers. The disk can be mounted on the host for launching a Container using ploop (i.e., PARALLELS loop, or a regular LINUX loop, or a natural block device). In case of the VMs, the disk image is provided to a hypervisor for launching a VM.
FIG. 2 illustrates a system for implementing a hybrid storage optimized for storing files for VMs and Containers, in accordance with the exemplary embodiment.
Containers 120 store data in their own file system 125. The VMs store data on the image file 130, which is converted into a virtual disk 115. The image file is placed onto a special large file storage 150, which is optimized for very large files that have their attributes (i.e., metadata) change very rarely, while the file data content experiences frequent and massive changes. The large file storage 150 can be implemented as CEPH (rbd*), ZFS (zuol), PStorage*, thin DM, etc.
The management system for VMs and Containers has to store a lot of small service files 135, such as configuration files, logs, locks, states, etc. According to an exemplary embodiment, a large files storage 150 is placed onto a service volume 205. A VM image file 130 is placed onto the large file storage 150 and a file system 210 is mounted on it. Any file system can be used. The component which creates the hybrid storage also creates the service volume 205 and places the file system 210 for storing configuration files. The small files storage 135 is also placed onto the service volume 205. This way a portion of the large file storage 150 can be seen to the management system for VMs and Containers as a part of an interface of the common file system 210.
This way, large files and small files reside on the same distributed storage—i.e., the service volume 205. A standard file system (e.g., EXT4) can be used. One file from the large file storage is dedicated as a service file. The file system is placed into this file, which is mounted into the system as a virtual disk 215. Then, the small files are stored on the virtual disk 215. This way all files are accessible by the management system for VMs and Containers (CTs). A special API library is created for providing an interface for mounting storages for small files and creation of service volumes. When the manager application launches a VM or a CT, it needs a special API (library) for using the configuration files used for launching the VMs/CTs. A hierarchical file system, such as BTRFS can be used with this interface for the Containers. In one embodiment, a node administrator can have all the rights for managing the hybrid storage. According to the exemplary embodiment, the image files can be encrypted. The encryption keys are stored on the CT hoster. However, the hoster data is protected in case of a physical data storage being stolen.
With reference to FIG. 3, an exemplary system for implementing the invention includes a general purpose computing device in the form of a computer system 20 or the like including a processing unit 21, a system memory 22, and a system bus 23 that couples various system components including the system memory to the processing unit 21.
The system bus 23 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus, and a local bus using any of a variety of bus architectures. The system memory includes read-only memory (ROM) 24 and random access memory (RAM) 25. A basic input/output system 26 (BIOS), containing the basic routines that help transfer information between elements within the computer 20, such as during start-up, is stored in ROM 24.
The computer 20 may further include a hard disk drive 27 for reading from and writing to a hard disk, not shown, a magnetic disk drive 28 for reading from or writing to a removable magnetic disk 29, and an optical disk drive 30 for reading from or writing to a removable optical disk 31 such as a CD-ROM, DVD-ROM or other optical media. The hard disk drive 27, magnetic disk drive 28, and optical disk drive 30 are connected to the system bus 23 by a hard disk drive interface 32, a magnetic disk drive interface 33, and an optical drive interface 34, respectively. The drives and their associated computer-readable media provide non-volatile storage of computer readable instructions, data structures, program modules and other data for the computer 20.
Although the exemplary environment described herein employs a hard disk, a removable magnetic disk 29 and a removable optical disk 31, it should be appreciated by those skilled in the art that other types of computer readable media that can store data that is accessible by a computer, such as magnetic cassettes, flash memory cards, digital video disks, Bernoulli cartridges, random access memories (RAMs), read-only memories (ROMs) and the like may also be used in the exemplary operating environment.
A number of program modules may be stored on the hard disk, magnetic disk 29, optical disk 31, ROM 24 or RAM 25, including an operating system 35. The computer 20 includes a file system 36 associated with or included within the operating system 35, one or more application programs 37, other program modules 38 and program data 39. A user may enter commands and information into the computer 20 through input devices such as a keyboard 40 and pointing device 42. Other input devices (not shown) may include a microphone, joystick, game pad, satellite dish, scanner or the like.
These and other input devices are often connected to the processing unit 21 through a serial port interface 46 that is coupled to the system bus, but may be connected by other interfaces, such as a parallel port, game port or universal serial bus (USB). A monitor 47 or other type of display device is also connected to the system bus 23 via an interface, such as a video adapter 48. In addition to the monitor 47, personal computers typically include other peripheral output devices (not shown), such as speakers and printers.
The computer 20 may operate in a networked environment using logical connections to one or more remote computers 49. The remote computer (or computers) 49 may be another computer, a server, a router, a network PC, a peer device or other common network node, and typically includes many or all of the elements described above relative to the computer 20, although only a memory storage device 50 has been illustrated. The logical connections include a local area network (LAN) 51 and a wide area network (WAN) 52. Such networking environments are commonplace in offices, enterprise-wide computer networks, Intranets and the Internet.
When used in a LAN networking environment, the computer 20 is connected to the local network 51 through a network interface or adapter 53. When used in a WAN networking environment, the computer 20 typically includes a modem 54 or other means for establishing communications over the wide area network 52, such as the Internet.
The modem 54, which may be internal or external, is connected to the system bus 23 via the serial port interface 46. In a networked environment, program modules depicted relative to the computer 20, or portions thereof, may be stored in the remote memory storage device. It will be appreciated that the network connections shown are exemplary and other means of establishing a communications link between the computers may be used.
Having thus described a preferred embodiment, it should be apparent to those skilled in the art that certain advantages of the described method and system have been achieved.
It should also be appreciated that various modifications, adaptations, and alternative embodiments thereof may be made within the scope and spirit of the present invention. The invention is further defined by the following claims.

Claims (8)

What is claimed is:
1. A computer-implemented method for creating a hybrid storage for storing data for Virtual Machines (VMs) and Containers, the method comprising:
launching a VM and a plurality of Containers on a host, wherein the Containers share a host operating system (OS) and files of the Containers are stored in a file system of the host OS, and wherein the VM and the plurality of Containers are under supervision of a management system;
storing a file system of the VM on a first virtual disk;
storing a file system of the Container on a second virtual disk;
mounting the second virtual disk with the file system of the Container on a host file system;
storing service files of the VM and service files of the Container in a service virtual disk;
instantiating a distributed image file storage accessible to the management system;
storing the first, second and third virtual disks as image files in the distributed image file storage,
wherein the third virtual disk is formatted as a service volume that is only accessible to the management system.
2. The method of claim 1, further comprising distributing the service volume.
3. The method of claim 1, further comprising encrypting the image file.
4. The method of claim 1, wherein the service files are any of:
configuration files;
logs;
locks, and
states.
5. A computer-implemented system for creating a hybrid storage for storing data for Virtual Machines (VMs) and Containers, the system comprising:
on a computer having a processor and a host operating system, a VM and a plurality of Containers executing under the host operating system, wherein the VM and the Containers share a host operating system (OS) and files of the Containers are stored in a host file system, and wherein the VM and the plurality of Containers are under supervision of a management system;
a file system of the VM stored on a first virtual disk;
file systems of the Containers stored on a second virtual disk;
the second virtual disk with the file system of the Containers being mounted on the host file system;
service files of the VM and service files of the Containers being stored in a service virtual disk;
a distributed image file storage accessible to the management system;
the first, second and third virtual disks being stored as image files in the distributed image file storage,
wherein the third virtual disk is formatted as a service volume that is only accessible to the management system.
6. The system of claim 5, further comprising distributing the service volume.
7. The system of claim 5, further comprising encrypting the image file.
8. The system of claim 5, wherein the service files are any of:
configuration files;
logs;
locks, and
states.
US15/062,070 2016-03-05 2016-03-05 Hybrid storage for virtual machines and containers Active 2037-01-02 US10360187B1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US15/062,070 US10360187B1 (en) 2016-03-05 2016-03-05 Hybrid storage for virtual machines and containers
US16/518,472 US10824463B1 (en) 2016-03-05 2019-07-22 Hybrid storage for virtual machines and containers

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US15/062,070 US10360187B1 (en) 2016-03-05 2016-03-05 Hybrid storage for virtual machines and containers

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US16/518,472 Continuation-In-Part US10824463B1 (en) 2016-03-05 2019-07-22 Hybrid storage for virtual machines and containers

Publications (1)

Publication Number Publication Date
US10360187B1 true US10360187B1 (en) 2019-07-23

Family

ID=67300735

Family Applications (1)

Application Number Title Priority Date Filing Date
US15/062,070 Active 2037-01-02 US10360187B1 (en) 2016-03-05 2016-03-05 Hybrid storage for virtual machines and containers

Country Status (1)

Country Link
US (1) US10360187B1 (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110659246A (en) * 2019-09-26 2020-01-07 北京百度网讯科技有限公司 Container-based file mounting method and device and electronic equipment
US20210382846A1 (en) * 2020-06-03 2021-12-09 International Business Machines Corporation Remote direct memory access for container-enabled networks
CN113970998A (en) * 2020-07-24 2022-01-25 中移(苏州)软件技术有限公司 Information processing method, device, terminal and storage medium

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150120928A1 (en) * 2013-10-24 2015-04-30 Vmware, Inc. Container virtual machines for hadoop
US20150234670A1 (en) * 2014-02-19 2015-08-20 Fujitsu Limited Management apparatus and workload distribution management method
US20150254364A1 (en) * 2014-03-04 2015-09-10 Vmware, Inc. Accessing a file in a virtual computing environment
US9256467B1 (en) * 2014-11-11 2016-02-09 Amazon Technologies, Inc. System for managing and scheduling containers
US9294524B2 (en) * 2013-12-16 2016-03-22 Nicira, Inc. Mapping virtual machines from a private network to a multi-tenant public datacenter
US20160292053A1 (en) * 2015-04-02 2016-10-06 Vmware, Inc. Fault tolerance for hybrid cloud deployments
US20160359955A1 (en) * 2015-06-05 2016-12-08 Nutanix, Inc. Architecture for managing i/o and storage for a virtualization environment using executable containers and virtual machines
US20160378519A1 (en) * 2015-06-29 2016-12-29 Vmware, Inc. Method and system for anticipating demand for a computational resource by containers running above guest operating systems within a distributed, virtualized computer system
US20170134507A1 (en) * 2012-02-10 2017-05-11 Vmware, Inc. Application-specific data in-flight (dif) services along a communication path selected based on a dif services policy associated with a vm
US20170177860A1 (en) * 2015-12-18 2017-06-22 Amazon Technologies, Inc. Software container registry container image deployment

Patent Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20170134507A1 (en) * 2012-02-10 2017-05-11 Vmware, Inc. Application-specific data in-flight (dif) services along a communication path selected based on a dif services policy associated with a vm
US20150120928A1 (en) * 2013-10-24 2015-04-30 Vmware, Inc. Container virtual machines for hadoop
US9294524B2 (en) * 2013-12-16 2016-03-22 Nicira, Inc. Mapping virtual machines from a private network to a multi-tenant public datacenter
US20150234670A1 (en) * 2014-02-19 2015-08-20 Fujitsu Limited Management apparatus and workload distribution management method
US20150254364A1 (en) * 2014-03-04 2015-09-10 Vmware, Inc. Accessing a file in a virtual computing environment
US9256467B1 (en) * 2014-11-11 2016-02-09 Amazon Technologies, Inc. System for managing and scheduling containers
US20160292053A1 (en) * 2015-04-02 2016-10-06 Vmware, Inc. Fault tolerance for hybrid cloud deployments
US20160359955A1 (en) * 2015-06-05 2016-12-08 Nutanix, Inc. Architecture for managing i/o and storage for a virtualization environment using executable containers and virtual machines
US20160378519A1 (en) * 2015-06-29 2016-12-29 Vmware, Inc. Method and system for anticipating demand for a computational resource by containers running above guest operating systems within a distributed, virtualized computer system
US20170177860A1 (en) * 2015-12-18 2017-06-22 Amazon Technologies, Inc. Software container registry container image deployment

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110659246A (en) * 2019-09-26 2020-01-07 北京百度网讯科技有限公司 Container-based file mounting method and device and electronic equipment
US20210382846A1 (en) * 2020-06-03 2021-12-09 International Business Machines Corporation Remote direct memory access for container-enabled networks
US11620254B2 (en) * 2020-06-03 2023-04-04 International Business Machines Corporation Remote direct memory access for container-enabled networks
CN113970998A (en) * 2020-07-24 2022-01-25 中移(苏州)软件技术有限公司 Information processing method, device, terminal and storage medium

Similar Documents

Publication Publication Date Title
US10635491B2 (en) System and method for use of a multi-tenant application server with a multitasking virtual machine
US8539481B2 (en) Using virtual hierarchies to build alternative namespaces
US8312459B2 (en) Use of rules engine to build namespaces
US10025924B1 (en) Taskless containers for enhanced isolation of users and multi-tenant applications
US10042661B1 (en) Method for creation of application containers inside OS containers
US8959511B2 (en) Template virtual machines
US8539137B1 (en) System and method for management of virtual execution environment disk storage
US11347558B2 (en) Security-aware scheduling of virtual machines in a multi-tenant infrastructure
US20070136356A1 (en) Mechanism for drivers to create alternate namespaces
US11226905B2 (en) System and method for mapping objects to regions
EP2541399A1 (en) A method and system for communicating between isolation environments
US20110134111A1 (en) Remote rendering of three-dimensional images using virtual machines
US10356150B1 (en) Automated repartitioning of streaming data
US20120011513A1 (en) Implementing a versioned virtualized application runtime environment
US20170060613A1 (en) Partitioning a hypervisor into virtual hypervisors
US9882775B1 (en) Dependent network resources
Luo et al. Whispers between the containers: High-capacity covert channel attacks in docker
US10929203B2 (en) Compare and swap functionality for key-value and object stores
WO2019168957A1 (en) Systems and methods for running applications on a multi-tenant container platform
US7996841B2 (en) Building alternative views of name spaces
US20110010428A1 (en) Peer-to-peer streaming and api services for plural applications
US10360187B1 (en) Hybrid storage for virtual machines and containers
US9971613B2 (en) Tag based permission system and method for virtualized environments
US20230342134A1 (en) Hybrid approach to performing a lazy pull of container images
US11216566B1 (en) System and method for encryption of ephemeral storage

Legal Events

Date Code Title Description
STCF Information on status: patent grant

Free format text: PATENTED CASE

MAFP Maintenance fee payment

Free format text: PAYMENT OF MAINTENANCE FEE, 4TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1551); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

Year of fee payment: 4